Jump to content

Welcome Guest to Geeks to Go - Register now for FREE
Geeks To Go is a helpful hub, where thousands of friendly volunteers serve up answers and support. Get free advice from the experts. Feel free to browse the site as a guest. However, you must log in to reply to existing topics or start a new topic of your own, and enjoy all this forum has to offer. Additionally, if you can assist another member by sharing your knowledge, please post a reply! Best of all - Registration and all assistance, is FREE! Learn more about How it Works. Infected? Malware Cleaning Guide. What are you waiting for?
Create an Account Login to Account

Another isearch victim[CLOSED]


  • This topic is locked This topic is locked

#1
crazybrker

crazybrker

    New Member

  • Member
  • Pip
  • 2 posts
So I finally got rid of my vdmt16 haxdoor.trojan that prevented me from running any spyware stuff always got the BSOD with each check. With that out of the way.

First I updated all my deffinitions, I have run cleanup! Reboot into safe mode, Run spybot S&D, Ad-Aware SE, Norton AV 2005, And Spyware Doctor. Rebooted into safe mode agian. Still getting pop ups and Ad-Aware said i still have I-Search. I also have this little Red circle with a white X in the middle saying Desktop items are authorized or somthing like that. Every reboot it puts casino, gambling, and many other [bleep] links on my desktop. Can you please help me ASAP. Thank you guys so much. This is what HJT said

Logfile of HijackThis v1.99.1
Scan saved at 2:55:16 PM, on 4/25/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\hjt\hijackthis1991.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://81.222.131.49/index.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\DOCUME~1\DANNYL~1\LOCALS~1\Temp\se.dll/spage.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.newgenlook.info/ad/ad0179/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://81.222.131.49/index.php
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\DOCUME~1\DANNYL~1\LOCALS~1\Temp\se.dll/spage.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://81.222.131.49/index.php
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http://81.222.131.49/index.php
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = http://81.222.131.49/index.php
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: (no name) - SOFTWARE - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: (no name) - {7AFD62F0-F051-469E-8D93-F307B41FB896} - C:\WINDOWS\System32\mlah.dll (file missing)
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {FFFFDA2C-A0D5-4D60-8EE1-1B7F8929E24D} - C:\Program Files\Lycos\sst.dll (file missing)
O3 - Toolbar: ZeroBar - {F5735C15-1FB2-41FE-BA12-242757E69DDE} - C:\Program Files\NetZero\Toolbar.dll
O3 - Toolbar: ZeroBar - {F0F8ECBE-D460-4B34-B007-56A92E8F84A7} - C:\Program Files\NetZero\toolbar.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [CountrySelection] pctptt.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [PayTime] C:\WINDOWS\System32\paytime.exe
O4 - HKLM\..\Run: [Pbp] C:\WINDOWS\Tnb.exe
O4 - HKLM\..\Run: [atipatxx] C:\WINDOWS\System32\atipatxx.exe
O4 - HKLM\..\Run: [Mvq] C:\WINDOWS\System32\Fuc.exe
O4 - HKLM\..\Run: [Mmk] C:\WINDOWS\Dgb.exe
O4 - HKLM\..\Run: [Cjc] C:\WINDOWS\Eju.exe
O4 - HKLM\..\Run: [Vee] C:\WINDOWS\Ipf.exe
O4 - HKLM\..\Run: [Qll] C:\WINDOWS\Rcs.exe
O4 - HKLM\..\Run: [Eur] C:\WINDOWS\Bsp.exe
O4 - HKLM\..\Run: [Ueu] C:\WINDOWS\System32\Hba.exe
O4 - HKLM\..\Run: [Vov] C:\WINDOWS\System32\Ufh.exe
O4 - HKLM\..\Run: [Ttv] C:\WINDOWS\Dce.exe
O4 - HKLM\..\Run: [Ggr] C:\WINDOWS\System32\Ebj.exe
O4 - HKLM\..\Run: [Vvn] C:\WINDOWS\System32\Lff.exe
O4 - HKLM\..\Run: [Luf] C:\WINDOWS\System32\Klg.exe
O4 - HKLM\..\Run: [Ign] C:\WINDOWS\Aif.exe
O4 - HKLM\..\Run: [Nrp] C:\WINDOWS\System32\Okq.exe
O4 - HKLM\..\Run: [Bhd] C:\WINDOWS\System32\Qeq.exe
O4 - HKLM\..\Run: [Nth] C:\WINDOWS\System32\Gjn.exe
O4 - HKLM\..\Run: [Ueh] C:\WINDOWS\System32\Rpl.exe
O4 - HKLM\..\Run: [Gpo] C:\WINDOWS\System32\Nuh.exe
O4 - HKLM\..\Run: [Qje] C:\WINDOWS\Kpl.exe
O4 - HKLM\..\Run: [Jrf] C:\WINDOWS\Cou.exe
O4 - HKLM\..\Run: [Tok] C:\WINDOWS\Kec.exe
O4 - HKLM\..\Run: [Hmn] C:\WINDOWS\Dbc.exe
O4 - HKLM\..\Run: [Nrn] C:\WINDOWS\System32\Tbk.exe
O4 - HKLM\..\Run: [Rsf] C:\WINDOWS\Fql.exe
O4 - HKLM\..\Run: [Cqk] C:\WINDOWS\Nhg.exe
O4 - HKLM\..\Run: [Qgd] C:\WINDOWS\System32\Dso.exe
O4 - HKLM\..\Run: [Che] C:\WINDOWS\System32\Nkj.exe
O4 - HKLM\..\Run: [Vmu] C:\WINDOWS\System32\Kuf.exe
O4 - HKLM\..\Run: [Tgr] C:\WINDOWS\System32\Krc.exe
O4 - HKLM\..\Run: [Bov] C:\WINDOWS\System32\Vhv.exe
O4 - HKLM\..\Run: [Ace] C:\WINDOWS\Ljf.exe
O4 - HKLM\..\Run: [Qst] C:\WINDOWS\System32\Shn.exe
O4 - HKLM\..\Run: [Ogb] C:\WINDOWS\System32\Vjs.exe
O4 - HKLM\..\Run: [Bqf] C:\WINDOWS\System32\Dkk.exe
O4 - HKLM\..\Run: [Pcl] C:\WINDOWS\Vsq.exe
O4 - HKLM\..\Run: [Fgf] C:\WINDOWS\System32\Njg.exe
O4 - HKLM\..\Run: [Mcv] C:\WINDOWS\Vdm.exe
O4 - HKLM\..\Run: [Qja] C:\WINDOWS\System32\Jdg.exe
O4 - HKLM\..\Run: [Mmp] C:\WINDOWS\Vdm.exe
O4 - HKLM\..\Run: [Inf] C:\WINDOWS\System32\Ifa.exe
O4 - HKLM\..\Run: [Kmp] C:\WINDOWS\Spu.exe
O4 - HKLM\..\Run: [Kel] C:\WINDOWS\System32\Shp.exe
O4 - HKLM\..\Run: [Kcc] C:\WINDOWS\Qgs.exe
O4 - HKLM\..\Run: [Rbi] C:\WINDOWS\Aco.exe
O4 - HKLM\..\Run: [Qpb] C:\WINDOWS\Pqe.exe
O4 - HKLM\..\Run: [Mfk] C:\WINDOWS\System32\Ope.exe
O4 - HKLM\..\Run: [Vrv] C:\WINDOWS\Aoh.exe
O4 - HKLM\..\Run: [Kov] C:\WINDOWS\System32\Jlj.exe
O4 - HKLM\..\Run: [Plm] C:\WINDOWS\System32\Isu.exe
O4 - HKLM\..\Run: [Qmo] C:\WINDOWS\System32\Uph.exe
O4 - HKLM\..\Run: [Gio] C:\WINDOWS\System32\Kdk.exe
O4 - HKLM\..\Run: [Igh] C:\WINDOWS\Uai.exe
O4 - HKLM\..\Run: [Tdq] C:\WINDOWS\Nve.exe
O4 - HKLM\..\Run: [Afk] C:\WINDOWS\System32\Nja.exe
O4 - HKLM\..\Run: [Lav] C:\WINDOWS\System32\Pqc.exe
O4 - HKLM\..\Run: [Mht] C:\WINDOWS\System32\Pvg.exe
O4 - HKLM\..\Run: [Qki] C:\WINDOWS\Uii.exe
O4 - HKLM\..\Run: [Noj] C:\WINDOWS\System32\Vnp.exe
O4 - HKLM\..\Run: [Crg] C:\WINDOWS\Spu.exe
O4 - HKLM\..\Run: [Pah] C:\WINDOWS\System32\Iga.exe
O4 - HKLM\..\Run: [Reu] C:\WINDOWS\Rle.exe
O4 - HKLM\..\Run: [Qlb] C:\WINDOWS\Rsi.exe
O4 - HKLM\..\Run: [Rsi] C:\WINDOWS\System32\Smr.exe
O4 - HKLM\..\Run: [Kek] C:\WINDOWS\System32\Kac.exe
O4 - HKLM\..\Run: [Pde] C:\WINDOWS\System32\Npa.exe
O4 - HKLM\..\Run: [Ibk] C:\WINDOWS\Luj.exe
O4 - HKLM\..\Run: [Qgb] C:\WINDOWS\Jeb.exe
O4 - HKLM\..\Run: [Tlo] C:\WINDOWS\System32\Uud.exe
O4 - HKLM\..\Run: [Rdf] C:\WINDOWS\System32\Jno.exe
O4 - HKLM\..\Run: [Hml] C:\WINDOWS\Bom.exe
O4 - HKLM\..\Run: [Scd] C:\WINDOWS\System32\Mtk.exe
O4 - HKLM\..\Run: [Qpq] C:\WINDOWS\System32\Ibp.exe
O4 - HKLM\..\Run: [Eio] C:\WINDOWS\System32\Vbd.exe
O4 - HKLM\..\Run: [Dfv] C:\WINDOWS\System32\Pkh.exe
O4 - HKLM\..\Run: [Uqq] C:\WINDOWS\System32\Eum.exe
O4 - HKLM\..\Run: [Hlv] C:\WINDOWS\Hve.exe
O4 - HKLM\..\Run: [Dle] C:\WINDOWS\System32\Ati.exe
O4 - HKLM\..\Run: [Tku] C:\WINDOWS\Fjr.exe
O4 - HKLM\..\Run: [Tsp] C:\WINDOWS\Vjq.exe
O4 - HKLM\..\Run: [Pvt] C:\WINDOWS\System32\Msm.exe
O4 - HKLM\..\Run: [Rkr] C:\WINDOWS\Vjh.exe
O4 - HKLM\..\Run: [Lkv] C:\WINDOWS\Mbj.exe
O4 - HKLM\..\Run: [Iut] C:\WINDOWS\Epc.exe
O4 - HKLM\..\Run: [Nan] C:\WINDOWS\System32\Ctp.exe
O4 - HKLM\..\Run: [Bft] C:\WINDOWS\System32\Tvc.exe
O4 - HKLM\..\Run: [Gni] C:\WINDOWS\Vvs.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [Cpe] C:\WINDOWS\System32\Ofo.exe
O4 - HKLM\..\Run: [Thq] C:\WINDOWS\System32\Kjo.exe
O4 - HKLM\..\Run: [Ofi] C:\WINDOWS\Gad.exe
O4 - HKLM\..\Run: [Brr] C:\WINDOWS\Adj.exe
O4 - HKLM\..\Run: [Ifp] C:\WINDOWS\System32\Tij.exe
O4 - HKLM\..\Run: [Qqr] C:\WINDOWS\Jdp.exe
O4 - HKLM\..\Run: [Dem] C:\WINDOWS\System32\Bub.exe
O4 - HKLM\..\Run: [Usm] C:\WINDOWS\Jbd.exe
O4 - HKLM\..\Run: [Bbg] C:\WINDOWS\Smm.exe
O4 - HKLM\..\Run: [Vka] C:\WINDOWS\Odd.exe
O4 - HKLM\..\Run: [Qmf] C:\WINDOWS\Jtm.exe
O4 - HKLM\..\Run: [Fue] C:\WINDOWS\System32\Luk.exe
O4 - HKLM\..\Run: [Qas] C:\WINDOWS\System32\Svg.exe
O4 - HKLM\..\Run: [Ffh] C:\WINDOWS\System32\Mep.exe
O4 - HKLM\..\Run: [Sgg] C:\WINDOWS\System32\Bpf.exe
O4 - HKLM\..\Run: [Ksk] C:\WINDOWS\Mou.exe
O4 - HKLM\..\Run: [Fer] C:\WINDOWS\Gfe.exe
O4 - HKLM\..\Run: [Kko] C:\WINDOWS\System32\Tth.exe
O4 - HKLM\..\Run: [Vlp] C:\WINDOWS\Vqc.exe
O4 - HKLM\..\Run: [Cbs] C:\WINDOWS\Urg.exe
O4 - HKLM\..\Run: [Adu] C:\WINDOWS\System32\Rfv.exe
O4 - HKLM\..\Run: [Bot] C:\WINDOWS\Trn.exe
O4 - HKLM\..\Run: [Bqm] C:\WINDOWS\System32\Uog.exe
O4 - HKLM\..\Run: [Gal] C:\WINDOWS\System32\Apt.exe
O4 - HKLM\..\Run: [Tdn] C:\WINDOWS\Ocs.exe
O4 - HKLM\..\Run: [Tbm] C:\WINDOWS\System32\Emj.exe
O4 - HKLM\..\Run: [Ode] C:\WINDOWS\System32\Qgu.exe
O4 - HKLM\..\Run: [Kqe] C:\WINDOWS\Hnb.exe
O4 - HKLM\..\Run: [Clc] C:\WINDOWS\Jst.exe
O4 - HKLM\..\Run: [Smq] C:\WINDOWS\Sfs.exe
O4 - HKLM\..\Run: [Pnj] C:\WINDOWS\System32\Kie.exe
O4 - HKLM\..\Run: [Eug] C:\WINDOWS\Mqp.exe
O4 - HKLM\..\Run: [Iqj] C:\WINDOWS\System32\Rjv.exe
O4 - HKLM\..\Run: [Bbb] C:\WINDOWS\Lil.exe
O4 - HKLM\..\Run: [Ejg] C:\WINDOWS\System32\Dje.exe
O4 - HKLM\..\Run: [Mpt] C:\WINDOWS\Qvr.exe
O4 - HKLM\..\Run: [Gfr] C:\WINDOWS\Vgv.exe
O4 - HKLM\..\Run: [Qvd] C:\WINDOWS\Hgg.exe
O4 - HKLM\..\Run: [Sds] C:\WINDOWS\Qbd.exe
O4 - HKLM\..\Run: [Ahg] C:\WINDOWS\Jsk.exe
O4 - HKLM\..\Run: [Flg] C:\WINDOWS\System32\Rtg.exe
O4 - HKLM\..\Run: [Jhe] C:\WINDOWS\Lod.exe
O4 - HKLM\..\Run: [Nud] C:\WINDOWS\System32\Ndi.exe
O4 - HKLM\..\Run: [Ulb] C:\WINDOWS\Lcd.exe
O4 - HKLM\..\Run: [Prn] C:\WINDOWS\Jit.exe
O4 - HKLM\..\Run: [Icn] C:\WINDOWS\System32\Uar.exe
O4 - HKLM\..\Run: [Hnf] C:\WINDOWS\Fln.exe
O4 - HKLM\..\Run: [Ofu] C:\WINDOWS\System32\Rkg.exe
O4 - HKLM\..\Run: [Kke] C:\WINDOWS\System32\Afe.exe
O4 - HKLM\..\Run: [Eek] C:\WINDOWS\System32\Ieh.exe
O4 - HKLM\..\Run: [Bks] C:\WINDOWS\Fdc.exe
O4 - HKLM\..\Run: [Eeb] C:\WINDOWS\System32\Cna.exe
O4 - HKLM\..\Run: [Mic] C:\WINDOWS\System32\Lgv.exe
O4 - HKLM\..\Run: [Bvm] C:\WINDOWS\Tlu.exe
O4 - HKLM\..\Run: [Opg] C:\WINDOWS\System32\Les.exe
O4 - HKLM\..\Run: [Lsu] C:\WINDOWS\System32\Vgs.exe
O4 - HKLM\..\Run: [Gij] C:\WINDOWS\Stu.exe
O4 - HKLM\..\Run: [Udc] C:\WINDOWS\System32\Bks.exe
O4 - HKLM\..\Run: [Mrt] C:\WINDOWS\System32\Koe.exe
O4 - HKLM\..\Run: [Hup] C:\WINDOWS\Ajm.exe
O4 - HKLM\..\Run: [Ohh] C:\WINDOWS\Rrh.exe
O4 - HKLM\..\Run: [Gjd] C:\WINDOWS\Gdi.exe
O4 - HKLM\..\Run: [Php] C:\WINDOWS\Duq.exe
O4 - HKLM\..\Run: [Ltk] C:\WINDOWS\System32\Mrs.exe
O4 - HKLM\..\Run: [Vap] C:\WINDOWS\System32\Lpq.exe
O4 - HKLM\..\Run: [Ufr] C:\WINDOWS\Cja.exe
O4 - HKLM\..\Run: [Snu] C:\WINDOWS\Equ.exe
O4 - HKLM\..\Run: [Lvo] C:\WINDOWS\Rmf.exe
O4 - HKLM\..\Run: [Uah] C:\WINDOWS\System32\Onn.exe
O4 - HKLM\..\Run: [Qdv] C:\WINDOWS\System32\Kqt.exe
O4 - HKLM\..\Run: [Tsq] C:\WINDOWS\System32\Faj.exe
O4 - HKLM\..\Run: [Hiu] C:\WINDOWS\Fsq.exe
O4 - HKLM\..\Run: [Vok] C:\WINDOWS\System32\Qih.exe
O4 - HKLM\..\Run: [Gir] C:\WINDOWS\Fct.exe
O4 - HKLM\..\Run: [Nho] C:\WINDOWS\System32\Pso.exe
O4 - HKLM\..\Run: [Abm] C:\WINDOWS\Vhe.exe
O4 - HKLM\..\Run: [Tid] C:\WINDOWS\System32\Cjk.exe
O4 - HKLM\..\Run: [Njb] C:\WINDOWS\Gof.exe
O4 - HKLM\..\Run: [Oug] C:\WINDOWS\Tht.exe
O4 - HKLM\..\Run: [Opf] C:\WINDOWS\Uta.exe
O4 - HKLM\..\Run: [Gpj] C:\WINDOWS\System32\Aou.exe
O4 - HKLM\..\Run: [Jff] C:\WINDOWS\System32\Pjv.exe
O4 - HKLM\..\Run: [Iaa] C:\WINDOWS\Npr.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [Kbr] C:\WINDOWS\Ooq.exe
O4 - HKLM\..\Run: [Asm] C:\WINDOWS\Dnk.exe
O4 - HKLM\..\Run: [Rem] C:\WINDOWS\System32\Cbb.exe
O4 - HKLM\..\Run: [Gme] C:\WINDOWS\System32\Gll.exe
O4 - HKLM\..\Run: [Ikd] C:\WINDOWS\System32\Ivd.exe
O4 - HKLM\..\Run: [Som] C:\WINDOWS\System32\Vlf.exe
O4 - HKLM\..\Run: [Nfs] C:\WINDOWS\Htu.exe
O4 - HKLM\..\Run: [Ptu] C:\WINDOWS\Gco.exe
O4 - HKLM\..\Run: [Snn] C:\WINDOWS\Bds.exe
O4 - HKLM\..\Run: [Jvd] C:\WINDOWS\System32\Lfs.exe
O4 - HKLM\..\Run: [Nob] C:\WINDOWS\Hvm.exe
O4 - HKLM\..\Run: [Mnt] C:\WINDOWS\System32\Njd.exe
O4 - HKLM\..\Run: [Kai] C:\WINDOWS\Ijv.exe
O4 - HKLM\..\Run: [Cdb] C:\WINDOWS\Rqd.exe
O4 - HKLM\..\Run: [Bui] C:\WINDOWS\Sjh.exe
O4 - HKLM\..\Run: [Epi] C:\WINDOWS\System32\Skr.exe
O4 - HKLM\..\Run: [Qtt] C:\WINDOWS\System32\Dag.exe
O4 - HKLM\..\Run: [Via] C:\WINDOWS\Ouo.exe
O4 - HKLM\..\Run: [Mcl] C:\WINDOWS\System32\Mjm.exe
O4 - HKLM\..\Run: [Lsp] C:\WINDOWS\Tun.exe
O4 - HKLM\..\Run: [Mbe] C:\WINDOWS\Dmh.exe
O4 - HKLM\..\Run: [Sov] C:\WINDOWS\Sjt.exe
O4 - HKLM\..\Run: [Sro] C:\WINDOWS\Irh.exe
O4 - HKLM\..\Run: [Jcu] C:\WINDOWS\Lju.exe
O4 - HKLM\..\Run: [Rqa] C:\WINDOWS\System32\Ocs.exe
O4 - HKLM\..\Run: [Pfi] C:\WINDOWS\Hae.exe
O4 - HKLM\..\Run: [Pfv] C:\WINDOWS\Qpn.exe
O4 - HKLM\..\Run: [Ljv] C:\WINDOWS\System32\Srm.exe
O4 - HKLM\..\Run: [Krt] C:\WINDOWS\Jfk.exe
O4 - HKLM\..\Run: [Rpt] C:\WINDOWS\Qnn.exe
O4 - HKLM\..\Run: [Umj] C:\WINDOWS\System32\Jlv.exe
O4 - HKLM\..\Run: [Dkq] C:\WINDOWS\System32\Klk.exe
O4 - HKLM\..\Run: [Igi] C:\WINDOWS\System32\Ecv.exe
O4 - HKLM\..\Run: [Kta] C:\WINDOWS\Tno.exe
O4 - HKLM\..\Run: [Grc] C:\WINDOWS\System32\Acp.exe
O4 - HKLM\..\Run: [Nbj] C:\WINDOWS\Jnv.exe
O4 - HKLM\..\Run: [Nom] C:\WINDOWS\System32\Ogo.exe
O4 - HKLM\..\Run: [Nbc] C:\WINDOWS\Dqg.exe
O4 - HKLM\..\Run: [Ihv] C:\WINDOWS\Dum.exe
O4 - HKLM\..\Run: [Uub] C:\WINDOWS\Bps.exe
O4 - HKLM\..\Run: [Ssj] C:\WINDOWS\System32\Fnr.exe
O4 - HKLM\..\Run: [Frd] C:\WINDOWS\System32\Lsv.exe
O4 - HKLM\..\Run: [Hbm] C:\WINDOWS\System32\Amp.exe
O4 - HKLM\..\Run: [Efv] C:\WINDOWS\Plh.exe
O4 - HKLM\..\Run: [Kbq] C:\WINDOWS\Iog.exe
O4 - HKLM\..\Run: [Ogu] C:\WINDOWS\Nti.exe
O4 - HKLM\..\Run: [Krf] C:\WINDOWS\System32\Oka.exe
O4 - HKLM\..\Run: [Qfo] C:\WINDOWS\System32\Apq.exe
O4 - HKLM\..\Run: [Qfr] C:\WINDOWS\System32\Etu.exe
O4 - HKLM\..\Run: [Koa] C:\WINDOWS\Cci.exe
O4 - HKLM\..\Run: [Qin] C:\WINDOWS\System32\Nom.exe
O4 - HKLM\..\Run: [Tdo] C:\WINDOWS\Pro.exe
O4 - HKLM\..\Run: [Klm] C:\WINDOWS\Jnv.exe
O4 - HKLM\..\Run: [Mqb] C:\WINDOWS\Ghc.exe
O4 - HKLM\..\Run: [Hkb] C:\WINDOWS\System32\Baj.exe
O4 - HKLM\..\Run: [Ekt] C:\WINDOWS\Iod.exe
O4 - HKLM\..\Run: [Cnh] C:\WINDOWS\Opr.exe
O4 - HKLM\..\Run: [Aoo] C:\WINDOWS\System32\Alk.exe
O4 - HKLM\..\Run: [Pln] C:\WINDOWS\Mdd.exe
O4 - HKLM\..\Run: [Ukl] C:\WINDOWS\Udb.exe
O4 - HKLM\..\Run: [Vnv] C:\WINDOWS\Kdd.exe
O4 - HKLM\..\Run: [Anf] C:\WINDOWS\Ocr.exe
O4 - HKLM\..\Run: [Tfi] C:\WINDOWS\Kgi.exe
O4 - HKLM\..\Run: [Jul] C:\WINDOWS\System32\Boh.exe
O4 - HKLM\..\Run: [Thc] C:\WINDOWS\Cig.exe
O4 - HKLM\..\Run: [Nau] C:\WINDOWS\Nho.exe
O4 - HKLM\..\Run: [Fbr] C:\WINDOWS\System32\Npo.exe
O4 - HKLM\..\Run: [Mvb] C:\WINDOWS\Hjn.exe
O4 - HKLM\..\Run: [Seo] C:\WINDOWS\Nkn.exe
O4 - HKLM\..\Run: [Gjq] C:\WINDOWS\Kvo.exe
O4 - HKLM\..\Run: [Aju] C:\WINDOWS\Gvr.exe
O4 - HKLM\..\Run: [Sml] C:\WINDOWS\Clq.exe
O4 - HKLM\..\Run: [Fnl] C:\WINDOWS\Rlu.exe
O4 - HKLM\..\Run: [Qjd] C:\WINDOWS\Jcu.exe
O4 - HKLM\..\Run: [Inr] C:\WINDOWS\System32\Gnm.exe
O4 - HKLM\..\Run: [Ala] C:\WINDOWS\System32\Lke.exe
O4 - HKLM\..\Run: [Hdc] C:\WINDOWS\System32\Dds.exe
O4 - HKLM\..\Run: [Bmf] C:\WINDOWS\Tan.exe
O4 - HKLM\..\Run: [Sir] C:\WINDOWS\Hoi.exe
O4 - HKLM\..\Run: [Nls] C:\WINDOWS\Nrd.exe
O4 - HKLM\..\Run: [Qku] C:\WINDOWS\System32\Kgf.exe
O4 - HKLM\..\Run: [Fku] C:\WINDOWS\System32\Fbt.exe
O4 - HKLM\..\Run: [Sfd] C:\WINDOWS\System32\Nkq.exe
O4 - HKLM\..\Run: [Svo] C:\WINDOWS\Uab.exe
O4 - HKLM\..\Run: [Dbs] C:\WINDOWS\Cae.exe
O4 - HKLM\..\Run: [Hhl] C:\WINDOWS\System32\Qjj.exe
O4 - HKLM\..\Run: [Pku] C:\WINDOWS\Jru.exe
O4 - HKLM\..\Run: [Gea] C:\WINDOWS\System32\Qfj.exe
O4 - HKLM\..\Run: [Dqc] C:\WINDOWS\Jji.exe
O4 - HKLM\..\Run: [Ltb] C:\WINDOWS\Lqe.exe
O4 - HKLM\..\Run: [Css] C:\WINDOWS\System32\Llg.exe
O4 - HKLM\..\Run: [Odh] C:\WINDOWS\System32\Doc.exe
O4 - HKLM\..\Run: [Bcc] C:\WINDOWS\Ctc.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [Kpi] C:\WINDOWS\Vtf.exe
O4 - HKLM\..\Run: [yhggwrp] c:\windows\system32\vbslmb.exe
O4 - HKLM\..\RunServices: [atipatxx] C:\WINDOWS\System32\atipatxx.exe
O4 - HKLM\..\RunOnce: [LUSETUP-LT] C:\PROGRA~1\Symantec\LIVEUP~1\LUSETU~1.EXE -s -a -q -log
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [NetZero_uoltray] C:\Program Files\NetZero\exec.exe regrun
O4 - HKCU\..\Run: [Spyware Doctor] "C:\Program Files\Spyware Doctor\swdoctor.exe" /Q
O4 - HKCU\..\Run: [PayTime] C:\WINDOWS\System32\paytime.exe
O4 - HKCU\..\Run: [Pbp] C:\WINDOWS\Tnb.exe
O4 - HKCU\..\Run: [atipatxx] C:\WINDOWS\System32\atipatxx.exe
O4 - HKCU\..\Run: [WindowsFY] c:\wp.exe
O4 - HKCU\..\Run: [Mvq] C:\WINDOWS\System32\Fuc.exe
O4 - HKCU\..\Run: [Mmk] C:\WINDOWS\Dgb.exe
O4 - HKCU\..\Run: [Cjc] C:\WINDOWS\Eju.exe
O4 - HKCU\..\Run: [Vee] C:\WINDOWS\Ipf.exe
O4 - HKCU\..\Run: [Qll] C:\WINDOWS\Rcs.exe
O4 - HKCU\..\Run: [Mjp] C:\WINDOWS\Fas.exe
O4 - HKCU\..\Run: [Raj] C:\WINDOWS\System32\Jgd.exe
O4 - HKCU\..\Run: [Eur] C:\WINDOWS\Bsp.exe
O4 - HKCU\..\Run: [Ueu] C:\WINDOWS\System32\Hba.exe
O4 - HKCU\..\Run: [Vov] C:\WINDOWS\System32\Ufh.exe
O4 - HKCU\..\Run: [Ttv] C:\WINDOWS\Dce.exe
O4 - HKCU\..\Run: [Aih] C:\WINDOWS\Vsl.exe
O4 - HKCU\..\Run: [Ggr] C:\WINDOWS\System32\Ebj.exe
O4 - HKCU\..\Run: [Vvn] C:\WINDOWS\System32\Lff.exe
O4 - HKCU\..\Run: [Luf] C:\WINDOWS\System32\Klg.exe
O4 - HKCU\..\Run: [Ign] C:\WINDOWS\Aif.exe
O4 - HKCU\..\Run: [Nrp] C:\WINDOWS\System32\Okq.exe
O4 - HKCU\..\Run: [Bhd] C:\WINDOWS\System32\Qeq.exe
O4 - HKCU\..\Run: [Nth] C:\WINDOWS\System32\Gjn.exe
O4 - HKCU\..\Run: [Ueh] C:\WINDOWS\System32\Rpl.exe
O4 - HKCU\..\Run: [Gpo] C:\WINDOWS\System32\Nuh.exe
O4 - HKCU\..\Run: [Qje] C:\WINDOWS\Kpl.exe
O4 - HKCU\..\Run: [Jrf] C:\WINDOWS\Cou.exe
O4 - HKCU\..\Run: [Tok] C:\WINDOWS\Kec.exe
O4 - HKCU\..\Run: [Hmn] C:\WINDOWS\Dbc.exe
O4 - HKCU\..\Run: [Nrn] C:\WINDOWS\System32\Tbk.exe
O4 - HKCU\..\Run: [Rsf] C:\WINDOWS\Fql.exe
O4 - HKCU\..\Run: [Cqk] C:\WINDOWS\Nhg.exe
O4 - HKCU\..\Run: [Qgd] C:\WINDOWS\System32\Dso.exe
O4 - HKCU\..\Run: [Che] C:\WINDOWS\System32\Nkj.exe
O4 - HKCU\..\Run: [Vmu] C:\WINDOWS\System32\Kuf.exe
O4 - HKCU\..\Run: [Tgr] C:\WINDOWS\System32\Krc.exe
O4 - HKCU\..\Run: [Bov] C:\WINDOWS\System32\Vhv.exe
O4 - HKCU\..\Run: [Ace] C:\WINDOWS\Ljf.exe
O4 - HKCU\..\Run: [Qst] C:\WINDOWS\System32\Shn.exe
O4 - HKCU\..\Run: [Ogb] C:\WINDOWS\System32\Vjs.exe
O4 - HKCU\..\Run: [Bqf] C:\WINDOWS\System32\Dkk.exe
O4 - HKCU\..\Run: [Pcl] C:\WINDOWS\Vsq.exe
O4 - HKCU\..\Run: [Fgf] C:\WINDOWS\System32\Njg.exe
O4 - HKCU\..\Run: [Mcv] C:\WINDOWS\Vdm.exe
O4 - HKCU\..\Run: [Qja] C:\WINDOWS\System32\Jdg.exe
O4 - HKCU\..\Run: [Mmp] C:\WINDOWS\Vdm.exe
O4 - HKCU\..\Run: [Inf] C:\WINDOWS\System32\Ifa.exe
O4 - HKCU\..\Run: [Kmp] C:\WINDOWS\Spu.exe
O4 - HKCU\..\Run: [Kel] C:\WINDOWS\System32\Shp.exe
O4 - HKCU\..\Run: [Kcc] C:\WINDOWS\Qgs.exe
O4 - HKCU\..\Run: [Rbi] C:\WINDOWS\Aco.exe
O4 - HKCU\..\Run: [Qpb] C:\WINDOWS\Pqe.exe
O4 - HKCU\..\Run: [Mfk] C:\WINDOWS\System32\Ope.exe
O4 - HKCU\..\Run: [Vrv] C:\WINDOWS\Aoh.exe
O4 - HKCU\..\Run: [Kov] C:\WINDOWS\System32\Jlj.exe
O4 - HKCU\..\Run: [Plm] C:\WINDOWS\System32\Isu.exe
O4 - HKCU\..\Run: [Qmo] C:\WINDOWS\System32\Uph.exe
O4 - HKCU\..\Run: [Gio] C:\WINDOWS\System32\Kdk.exe
O4 - HKCU\..\Run: [Igh] C:\WINDOWS\Uai.exe
O4 - HKCU\..\Run: [Tdq] C:\WINDOWS\Nve.exe
O4 - HKCU\..\Run: [Afk] C:\WINDOWS\System32\Nja.exe
O4 - HKCU\..\Run: [Lav] C:\WINDOWS\System32\Pqc.exe
O4 - HKCU\..\Run: [Mht] C:\WINDOWS\System32\Pvg.exe
O4 - HKCU\..\Run: [Qki] C:\WINDOWS\Uii.exe
O4 - HKCU\..\Run: [Noj] C:\WINDOWS\System32\Vnp.exe
O4 - HKCU\..\Run: [Crg] C:\WINDOWS\Spu.exe
O4 - HKCU\..\Run: [Pah] C:\WINDOWS\System32\Iga.exe
O4 - HKCU\..\Run: [Reu] C:\WINDOWS\Rle.exe
O4 - HKCU\..\Run: [Qlb] C:\WINDOWS\Rsi.exe
O4 - HKCU\..\Run: [Rsi] C:\WINDOWS\System32\Smr.exe
O4 - HKCU\..\Run: [Kek] C:\WINDOWS\System32\Kac.exe
O4 - HKCU\..\Run: [Pde] C:\WINDOWS\System32\Npa.exe
O4 - HKCU\..\Run: [Ibk] C:\WINDOWS\Luj.exe
O4 - HKCU\..\Run: [Qgb] C:\WINDOWS\Jeb.exe
O4 - HKCU\..\Run: [Tlo] C:\WINDOWS\System32\Uud.exe
O4 - HKCU\..\Run: [Rdf] C:\WINDOWS\System32\Jno.exe
O4 - HKCU\..\Run: [Hml] C:\WINDOWS\Bom.exe
O4 - HKCU\..\Run: [Scd] C:\WINDOWS\System32\Mtk.exe
O4 - HKCU\..\Run: [Qpq] C:\WINDOWS\System32\Ibp.exe
O4 - HKCU\..\Run: [Eio] C:\WINDOWS\System32\Vbd.exe
O4 - HKCU\..\Run: [Dfv] C:\WINDOWS\System32\Pkh.exe
O4 - HKCU\..\Run: [Uqq] C:\WINDOWS\System32\Eum.exe
O4 - HKCU\..\Run: [Hlv] C:\WINDOWS\Hve.exe
O4 - HKCU\..\Run: [Dle] C:\WINDOWS\System32\Ati.exe
O4 - HKCU\..\Run: [Tku] C:\WINDOWS\Fjr.exe
O4 - HKCU\..\Run: [Tsp] C:\WINDOWS\Vjq.exe
O4 - HKCU\..\Run: [Pvt] C:\WINDOWS\System32\Msm.exe
O4 - HKCU\..\Run: [Rkr] C:\WINDOWS\Vjh.exe
O4 - HKCU\..\Run: [Lkv] C:\WINDOWS\Mbj.exe
O4 - HKCU\..\Run: [Iut] C:\WINDOWS\Epc.exe
O4 - HKCU\..\Run: [Nan] C:\WINDOWS\System32\Ctp.exe
O4 - HKCU\..\Run: [Bft] C:\WINDOWS\System32\Tvc.exe
O4 - HKCU\..\Run: [Gni] C:\WINDOWS\Vvs.exe
O4 - HKCU\..\Run: [Cpe] C:\WINDOWS\System32\Ofo.exe
O4 - HKCU\..\Run: [Thq] C:\WINDOWS\System32\Kjo.exe
O4 - HKCU\..\Run: [Ofi] C:\WINDOWS\Gad.exe
O4 - HKCU\..\Run: [Brr] C:\WINDOWS\Adj.exe
O4 - HKCU\..\Run: [Ifp] C:\WINDOWS\System32\Tij.exe
O4 - HKCU\..\Run: [Qqr] C:\WINDOWS\Jdp.exe
O4 - HKCU\..\Run: [Dem] C:\WINDOWS\System32\Bub.exe
O4 - HKCU\..\Run: [Usm] C:\WINDOWS\Jbd.exe
O4 - HKCU\..\Run: [Bbg] C:\WINDOWS\Smm.exe
O4 - HKCU\..\Run: [Vka] C:\WINDOWS\Odd.exe
O4 - HKCU\..\Run: [Qmf] C:\WINDOWS\Jtm.exe
O4 - HKCU\..\Run: [Fue] C:\WINDOWS\System32\Luk.exe
O4 - HKCU\..\Run: [Qas] C:\WINDOWS\System32\Svg.exe
O4 - HKCU\..\Run: [Ffh] C:\WINDOWS\System32\Mep.exe
O4 - HKCU\..\Run: [Sgg] C:\WINDOWS\System32\Bpf.exe
O4 - HKCU\..\Run: [Ksk] C:\WINDOWS\Mou.exe
O4 - HKCU\..\Run: [Fer] C:\WINDOWS\Gfe.exe
O4 - HKCU\..\Run: [Kko] C:\WINDOWS\System32\Tth.exe
O4 - HKCU\..\Run: [Vlp] C:\WINDOWS\Vqc.exe
O4 - HKCU\..\Run: [Cbs] C:\WINDOWS\Urg.exe
O4 - HKCU\..\Run: [Adu] C:\WINDOWS\System32\Rfv.exe
O4 - HKCU\..\Run: [Bot] C:\WINDOWS\Trn.exe
O4 - HKCU\..\Run: [Bqm] C:\WINDOWS\System32\Uog.exe
O4 - HKCU\..\Run: [Gal] C:\WINDOWS\System32\Apt.exe
O4 - HKCU\..\Run: [Tdn] C:\WINDOWS\Ocs.exe
O4 - HKCU\..\Run: [Tbm] C:\WINDOWS\System32\Emj.exe
O4 - HKCU\..\Run: [Ode] C:\WINDOWS\System32\Qgu.exe
O4 - HKCU\..\Run: [Kqe] C:\WINDOWS\Hnb.exe
O4 - HKCU\..\Run: [Clc] C:\WINDOWS\Jst.exe
O4 - HKCU\..\Run: [Smq] C:\WINDOWS\Sfs.exe
O4 - HKCU\..\Run: [Pnj] C:\WINDOWS\System32\Kie.exe
O4 - HKCU\..\Run: [Eug] C:\WINDOWS\Mqp.exe
O4 - HKCU\..\Run: [Iqj] C:\WINDOWS\System32\Rjv.exe
O4 - HKCU\..\Run: [Bbb] C:\WINDOWS\Lil.exe
O4 - HKCU\..\Run: [Ejg] C:\WINDOWS\System32\Dje.exe
O4 - HKCU\..\Run: [Mpt] C:\WINDOWS\Qvr.exe
O4 - HKCU\..\Run: [Gfr] C:\WINDOWS\Vgv.exe
O4 - HKCU\..\Run: [Qvd] C:\WINDOWS\Hgg.exe
O4 - HKCU\..\Run: [Sds] C:\WINDOWS\Qbd.exe
O4 - HKCU\..\Run: [Ahg] C:\WINDOWS\Jsk.exe
O4 - HKCU\..\Run: [Flg] C:\WINDOWS\System32\Rtg.exe
O4 - HKCU\..\Run: [Jhe] C:\WINDOWS\Lod.exe
O4 - HKCU\..\Run: [Nud] C:\WINDOWS\System32\Ndi.exe
O4 - HKCU\..\Run: [Ulb] C:\WINDOWS\Lcd.exe
O4 - HKCU\..\Run: [Prn] C:\WINDOWS\Jit.exe
O4 - HKCU\..\Run: [Icn] C:\WINDOWS\System32\Uar.exe
O4 - HKCU\..\Run: [Hnf] C:\WINDOWS\Fln.exe
O4 - HKCU\..\Run: [Ofu] C:\WINDOWS\System32\Rkg.exe
O4 - HKCU\..\Run: [Kke] C:\WINDOWS\System32\Afe.exe
O4 - HKCU\..\Run: [Eek] C:\WINDOWS\System32\Ieh.exe
O4 - HKCU\..\Run: [Bks] C:\WINDOWS\Fdc.exe
O4 - HKCU\..\Run: [Eeb] C:\WINDOWS\System32\Cna.exe
O4 - HKCU\..\Run: [Mic] C:\WINDOWS\System32\Lgv.exe
O4 - HKCU\..\Run: [Bvm] C:\WINDOWS\Tlu.exe
O4 - HKCU\..\Run: [Opg] C:\WINDOWS\System32\Les.exe
O4 - HKCU\..\Run: [Lsu] C:\WINDOWS\System32\Vgs.exe
O4 - HKCU\..\Run: [Gij] C:\WINDOWS\Stu.exe
O4 - HKCU\..\Run: [Udc] C:\WINDOWS\System32\Bks.exe
O4 - HKCU\..\Run: [Mrt] C:\WINDOWS\System32\Koe.exe
O4 - HKCU\..\Run: [Hup] C:\WINDOWS\Ajm.exe
O4 - HKCU\..\Run: [Ohh] C:\WINDOWS\Rrh.exe
O4 - HKCU\..\Run: [Gjd] C:\WINDOWS\Gdi.exe
O4 - HKCU\..\Run: [Php] C:\WINDOWS\Duq.exe
O4 - HKCU\..\Run: [Ltk] C:\WINDOWS\System32\Mrs.exe
O4 - HKCU\..\Run: [Vap] C:\WINDOWS\System32\Lpq.exe
O4 - HKCU\..\Run: [Ufr] C:\WINDOWS\Cja.exe
O4 - HKCU\..\Run: [Snu] C:\WINDOWS\Equ.exe
O4 - HKCU\..\Run: [Lvo] C:\WINDOWS\Rmf.exe
O4 - HKCU\..\Run: [Uah] C:\WINDOWS\System32\Onn.exe
O4 - HKCU\..\Run: [Qdv] C:\WINDOWS\System32\Kqt.exe
O4 - HKCU\..\Run: [Tsq] C:\WINDOWS\System32\Faj.exe
O4 - HKCU\..\Run: [Hiu] C:\WINDOWS\Fsq.exe
O4 - HKCU\..\Run: [Vok] C:\WINDOWS\System32\Qih.exe
O4 - HKCU\..\Run: [Gir] C:\WINDOWS\Fct.exe
O4 - HKCU\..\Run: [Nho] C:\WINDOWS\System32\Pso.exe
O4 - HKCU\..\Run: [Abm] C:\WINDOWS\Vhe.exe
O4 - HKCU\..\Run: [Tid] C:\WINDOWS\System32\Cjk.exe
O4 - HKCU\..\Run: [Njb] C:\WINDOWS\Gof.exe
O4 - HKCU\..\Run: [Oug] C:\WINDOWS\Tht.exe
O4 - HKCU\..\Run: [Opf] C:\WINDOWS\Uta.exe
O4 - HKCU\..\Run: [Jff] C:\WINDOWS\System32\Pjv.exe
O4 - HKCU\..\Run: [Iaa] C:\WINDOWS\Npr.exe
O4 - HKCU\..\Run: [Kbr] C:\WINDOWS\Ooq.exe
O4 - HKCU\..\Run: [Asm] C:\WINDOWS\Dnk.exe
O4 - HKCU\..\Run: [Rem] C:\WINDOWS\System32\Cbb.exe
O4 - HKCU\..\Run: [Gme] C:\WINDOWS\System32\Gll.exe
O4 - HKCU\..\Run: [Ikd] C:\WINDOWS\System32\Ivd.exe
O4 - HKCU\..\Run: [Som] C:\WINDOWS\System32\Vlf.exe
O4 - HKCU\..\Run: [Nfs] C:\WINDOWS\Htu.exe
O4 - HKCU\..\Run: [Ptu] C:\WINDOWS\Gco.exe
O4 - HKCU\..\Run: [Snn] C:\WINDOWS\Bds.exe
O4 - HKCU\..\Run: [Jvd] C:\WINDOWS\System32\Lfs.exe
O4 - HKCU\..\Run: [Nob] C:\WINDOWS\Hvm.exe
O4 - HKCU\..\Run: [Mnt] C:\WINDOWS\System32\Njd.exe
O4 - HKCU\..\Run: [Kai] C:\WINDOWS\Ijv.exe
O4 - HKCU\..\Run: [Cdb] C:\WINDOWS\Rqd.exe
O4 - HKCU\..\Run: [Bui] C:\WINDOWS\Sjh.exe
O4 - HKCU\..\Run: [Epi] C:\WINDOWS\System32\Skr.exe
O4 - HKCU\..\Run: [Qtt] C:\WINDOWS\System32\Dag.exe
O4 - HKCU\..\Run: [Via] C:\WINDOWS\Ouo.exe
O4 - HKCU\..\Run: [Mcl] C:\WINDOWS\System32\Mjm.exe
O4 - HKCU\..\Run: [Lsp] C:\WINDOWS\Tun.exe
O4 - HKCU\..\Run: [Mbe] C:\WINDOWS\Dmh.exe
O4 - HKCU\..\Run: [Sov] C:\WINDOWS\Sjt.exe
O4 - HKCU\..\Run: [Sro] C:\WINDOWS\Irh.exe
O4 - HKCU\..\Run: [Jcu] C:\WINDOWS\Lju.exe
O4 - HKCU\..\Run: [Rqa] C:\WINDOWS\System32\Ocs.exe
O4 - HKCU\..\Run: [Pfi] C:\WINDOWS\Hae.exe
O4 - HKCU\..\Run: [Pfv] C:\WINDOWS\Qpn.exe
O4 - HKCU\..\Run: [Ljv] C:\WINDOWS\System32\Srm.exe
O4 - HKCU\..\Run: [Krt] C:\WINDOWS\Jfk.exe
O4 - HKCU\..\Run: [Rpt] C:\WINDOWS\Qnn.exe
O4 - HKCU\..\Run: [Umj] C:\WINDOWS\System32\Jlv.exe
O4 - HKCU\..\Run: [Dkq] C:\WINDOWS\System32\Klk.exe
O4 - HKCU\..\Run: [Igi] C:\WINDOWS\System32\Ecv.exe
O4 - HKCU\..\Run: [Kta] C:\WINDOWS\Tno.exe
O4 - HKCU\..\Run: [Grc] C:\WINDOWS\System32\Acp.exe
O4 - HKCU\..\Run: [Nbj] C:\WINDOWS\Jnv.exe
O4 - HKCU\..\Run: [Nom] C:\WINDOWS\System32\Ogo.exe
O4 - HKCU\..\Run: [Nbc] C:\WINDOWS\Dqg.exe
O4 - HKCU\..\Run: [Ihv] C:\WINDOWS\Dum.exe
O4 - HKCU\..\Run: [Uub] C:\WINDOWS\Bps.exe
O4 - HKCU\..\Run: [Ssj] C:\WINDOWS\System32\Fnr.exe
O4 - HKCU\..\Run: [Frd] C:\WINDOWS\System32\Lsv.exe
O4 - HKCU\..\Run: [Hbm] C:\WINDOWS\System32\Amp.exe
O4 - HKCU\..\Run: [Efv] C:\WINDOWS\Plh.exe
O4 - HKCU\..\Run: [Kbq] C:\WINDOWS\Iog.exe
O4 - HKCU\..\Run: [Ogu] C:\WINDOWS\Nti.exe
O4 - HKCU\..\Run: [Krf] C:\WINDOWS\System32\Oka.exe
O4 - HKCU\..\Run: [Qfo] C:\WINDOWS\System32\Apq.exe
O4 - HKCU\..\Run: [Qfr] C:\WINDOWS\System32\Etu.exe
O4 - HKCU\..\Run: [Koa] C:\WINDOWS\Cci.exe
O4 - HKCU\..\Run: [Qin] C:\WINDOWS\System32\Nom.exe
O4 - HKCU\..\Run: [Tdo] C:\WINDOWS\Pro.exe
O4 - HKCU\..\Run: [Klm] C:\WINDOWS\Jnv.exe
O4 - HKCU\..\Run: [Mqb] C:\WINDOWS\Ghc.exe
O4 - HKCU\..\Run: [Hkb] C:\WINDOWS\System32\Baj.exe
O4 - HKCU\..\Run: [Ekt] C:\WINDOWS\Iod.exe
O4 - HKCU\..\Run: [Cnh] C:\WINDOWS\Opr.exe
O4 - HKCU\..\Run: [Aoo] C:\WINDOWS\System32\Alk.exe
O4 - HKCU\..\Run: [Pln] C:\WINDOWS\Mdd.exe
O4 - HKCU\..\Run: [Ukl] C:\WINDOWS\Udb.exe
O4 - HKCU\..\Run: [Vnv] C:\WINDOWS\Kdd.exe
O4 - HKCU\..\Run: [Anf] C:\WINDOWS\Ocr.exe
O4 - HKCU\..\Run: [Tfi] C:\WINDOWS\Kgi.exe
O4 - HKCU\..\Run: [Jul] C:\WINDOWS\System32\Boh.exe
O4 - HKCU\..\Run: [Thc] C:\WINDOWS\Cig.exe
O4 - HKCU\..\Run: [Nau] C:\WINDOWS\Nho.exe
O4 - HKCU\..\Run: [Fbr] C:\WINDOWS\System32\Npo.exe
O4 - HKCU\..\Run: [Mvb] C:\WINDOWS\Hjn.exe
O4 - HKCU\..\Run: [Seo] C:\WINDOWS\Nkn.exe
O4 - HKCU\..\Run: [Gjq] C:\WINDOWS\Kvo.exe
O4 - HKCU\..\Run: [Aju] C:\WINDOWS\Gvr.exe
O4 - HKCU\..\Run: [Sml] C:\WINDOWS\Clq.exe
O4 - HKCU\..\Run: [Fnl] C:\WINDOWS\Rlu.exe
O4 - HKCU\..\Run: [Qjd] C:\WINDOWS\Jcu.exe
O4 - HKCU\..\Run: [Inr] C:\WINDOWS\System32\Gnm.exe
O4 - HKCU\..\Run: [Ala] C:\WINDOWS\System32\Lke.exe
O4 - HKCU\..\Run: [Hdc] C:\WINDOWS\System32\Dds.exe
O4 - HKCU\..\Run: [Bmf] C:\WINDOWS\Tan.exe
O4 - HKCU\..\Run: [Sir] C:\WINDOWS\Hoi.exe
O4 - HKCU\..\Run: [Nls] C:\WINDOWS\Nrd.exe
O4 - HKCU\..\Run: [Qku] C:\WINDOWS\System32\Kgf.exe
O4 - HKCU\..\Run: [Fku] C:\WINDOWS\System32\Fbt.exe
O4 - HKCU\..\Run: [Sfd] C:\WINDOWS\System32\Nkq.exe
O4 - HKCU\..\Run: [Svo] C:\WINDOWS\Uab.exe
O4 - HKCU\..\Run: [Dbs] C:\WINDOWS\Cae.exe
O4 - HKCU\..\Run: [Hhl] C:\WINDOWS\System32\Qjj.exe
O4 - HKCU\..\Run: [Pku] C:\WINDOWS\Jru.exe
O4 - HKCU\..\Run: [Gea] C:\WINDOWS\System32\Qfj.exe
O4 - HKCU\..\Run: [Dqc] C:\WINDOWS\Jji.exe
O4 - HKCU\..\Run: [Ltb] C:\WINDOWS\Lqe.exe
O4 - HKCU\..\Run: [Css] C:\WINDOWS\System32\Llg.exe
O4 - HKCU\..\Run: [Odh] C:\WINDOWS\System32\Doc.exe
O4 - HKCU\..\Run: [Bcc] C:\WINDOWS\Ctc.exe
O4 - HKCU\..\Run: [Kpi] C:\WINDOWS\Vtf.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplane...DC_1_0_0_44.cab
O18 - Protocol: bw+0 - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {BADA616D-51F7-4663-8EC1-3B84233D2015} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: ntfs32 - C:\WINDOWS\SYSTEM32\ntfs32.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Provides three management service (FreeBSD) - Unknown owner - C:\WINDOWS\System32\dev32.exe
O23 - Service: Debug oupost relations (LAGOS) - Unknown owner - C:\WINDOWS\System32\ahtun.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: W2k PCtel speaker phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
O23 - Service: PDScheduler (PDSched) - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDSched.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

Good luck, i will check back often
You guys are the best
  • 0

Advertisement


#2
Kat

Kat

    Retired

  • Retired Staff
  • 19,704 posts
  • MVP
We can definitely help you, but first you need to help us. The first step in this process is to apply Service Pack 1a for Windows XP. Without this update, you're wide open to re-infection, and we're both just wasting our time.
Click here: http://www.microsoft...p1/default.mspx
Apply the update, reboot, and post a fresh Hijack This log.

Once you do, there will be steps for you to follow to get rid of the various infections on your pc. I will keep an eye out for the updated log!
  • 0

#3
crazybrker

crazybrker

    New Member

  • Member
  • Pip
  • 2 posts
Bad news, It wont install, it says somthing about a invalid product key, That wierd because this computer has the little sticker on the side of it with the serial number, so it should be good. This is my friends computer BTW so im not sure if he used this serial or another invaid one, is there any way around this without reinstalling windows because i dont have the CD. would you still be able to help me clear this up first later when i get the cd from him we wil have time to reinstall it agian and try the service pack agian
  • 0

#4
Kat

Kat

    Retired

  • Retired Staff
  • 19,704 posts
  • MVP
until you can upgrade to SP1, I am unable to help you. We need to be certain that it is a valid copy of Windows, due to a contract we have with Microsoft. I will keep an eye on this thread to watch for the update!
  • 0

#5
Kat

Kat

    Retired

  • Retired Staff
  • 19,704 posts
  • MVP
Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member with address of this thread. This applies only to the original topic starter. Everyone else please begin a New Topic.
  • 0

Advertisement




Similar Topics: Another isearch victim[CLOSED]     x


0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

featured